Privacy Policy
Last updated: June 13, 2026
The short version
Here's the whole thing in plain English. The full details are below.
- ✓Your records are yours. Download everything you've entered, anytime, with one click. We'll never hold your data hostage.
- ✓We never sell your data. Not to anyone, ever.
- ✓Your kids never log in. Only you, the parent, have an account — and you can review, correct, or delete anything about your children at any time.
- ✓We never see your card. Payments are handled entirely by Stripe.
- ✓You control your email. We send setup tips and occasional updates — unsubscribe anytime in one click.
- ✓Your data is encrypted on the way to us and while we store it, and only you can see your records.
Who we are
Cultivate is a family management platform for homeschool and homestead families, operated by Kyle O'Guin (“we,” “us,” or “our”). You can reach us at hello@mycultivate.app.
What data we collect
- Account information: Your email address and password (stored securely via Supabase Auth).
- Educational records: Children's names, grade levels, school year dates, daily log entries, attendance records, subjects, grades, and hours you choose to enter.
- Homestead and home records: Livestock, garden, food preservation, and home maintenance logs you create.
- Photos: Images you choose to attach to log entries — for example, a photo of a school project, a garden, or your children and their work. Photos are stored in our secure storage (Supabase) and are shown only within your own account, reports, and yearbook. They are never sent to our AI provider, and never shared or sold.
- Payment information: Handled entirely by Stripe. We never see or store your card number.
- Email address for communications: If you sign up for Cultivate, your email is added to our mailing list (managed via MailerLite) so we can send you onboarding guidance and product updates. You can unsubscribe at any time.
- Usage data: Standard server logs (pages visited, timestamps). We do not use third-party analytics trackers.
How we use your data
- To provide and operate the Cultivate service.
- To generate your reports, transcripts, and compliance summaries.
- To send transactional emails (account confirmation, password reset, subscription receipts).
- To send onboarding and product update emails via MailerLite. You can unsubscribe at any time using the link in any email we send.
- To improve the product based on aggregate usage patterns.
We do not sell your data to any third party, ever.
AI subject tagging and log routing
When you use the daily log, the text you enter is sent to Anthropic's API to identify relevant subjects, route your entry to the correct modules (homeschool, homestead, home maintenance), and pre-fill a confirmation card for your review. This text is not stored by Anthropic beyond the duration of the request, per Anthropic's privacy policy. Nothing is written to your records until you explicitly confirm the pre-filled card. You can edit or override any AI suggestion before confirming.
Your data export
You can download a complete export of every record you've ever entered in Cultivate — homeschool logs, homestead records, home maintenance history, and account information — at any time from your Account page. The export is a human-readable JSON file. Your data is yours. We will never hold it hostage.
Third-party services
- Supabase — database and authentication, hosted on AWS. All data is stored in the US.
- Vercel — web hosting and edge delivery.
- Stripe — payment processing. Stripe's privacy policy governs all payment data. We never see or store your card number.
- Anthropic — AI log routing and subject tagging. Log text is sent to Anthropic only during the routing step and is not stored beyond the request. Photos are never sent to Anthropic.
- Resend — transactional email delivery (account confirmation, password reset, subscription receipts, and critical service notices). Resend processes the email address and message contents needed to deliver these messages. Resend's privacy policy governs their handling of that data.
- MailerLite — marketing email communications. Your email address is stored in MailerLite so we can send onboarding and product update emails. You can unsubscribe at any time. MailerLite's privacy policy governs their handling of your email address.
We do not sell your data to any third party, ever.
Children's data (COPPA)
Cultivate is designed exclusively for parents and legal guardians to manage their family's educational and homestead records. Children do not create accounts, log in, or directly submit data to Cultivate. All data about minors is entered by the parent or guardian account holder.
We do not knowingly collect personal information directly from children under 13. Children's names, educational records, and any photos a parent chooses to attach are stored solely to provide the service to that parent — they are never used for advertising, profiling, facial recognition, or AI training, and are never shared with or sold to any third party.
As the parent or guardian, you have the right to review, correct, or request deletion of any information about your children stored in Cultivate. To exercise this right, email hello@mycultivate.app. If you believe a child under 13 has submitted data without parental consent, contact us and we will delete it promptly.
Your rights
You have the following rights over your data:
- Access: Download a complete export of all your data at any time from your Account page.
- Correction: Edit any record you've entered directly in the app, or email us.
- Deletion: Request deletion of your account and all associated data at any time. We will process deletion requests within 30 days.
- Unsubscribe: Opt out of all marketing email at any time using the unsubscribe link in any email we send, or by emailing us.
- Children's records: As the parent or guardian, review, correct, or delete any records about your children at any time.
To exercise any of these rights, email hello@mycultivate.app.
Data retention and deletion
We keep your records for as long as you have an account with us — including after a subscription ends — so you can always return to your history or export it. We do not automatically delete your data when you cancel. You may request permanent deletion of your account and all associated data at any time by emailing hello@mycultivate.app. We will process deletion requests within 30 days. Backups may retain data for up to 90 days after deletion — no backup data is used for any purpose after a deletion request is processed.
Security
Your data is encrypted both in transit (every connection uses HTTPS) and at rest (encrypted on our servers). Passwords are never stored in plaintext. Row-level security in Supabase ensures you can only access your own data — no other user can read your records. We rely on Supabase's enterprise-grade security infrastructure including encrypted storage and automated daily backups. No system is 100% secure — if you discover a vulnerability, please report it to hello@mycultivate.app.
State compliance disclaimer
Cultivate tracks homeschool hours and subjects based on publicly available state requirement data. This information is provided for reference only. Homeschool laws change — always verify your state's current requirements at hslda.org/legal or your state education department. Cultivate is not a law firm and does not provide legal advice.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email to active subscribers at least 14 days before taking effect. The current version is always available at mycultivate.app/privacy. Continued use of Cultivate after changes take effect constitutes acceptance of the updated policy.
Contact
Questions about this policy? hello@mycultivate.app